 (use-fixtures :each (partial reset-db storage-spec))
 
 (def ^:private attachments-context
-  {:users [(factory :user, {:email "john@doe.com"})]
+  {:users [(factory :user, {:email "john@doe.com"})
+           (factory :user, {:email "jane@doe.com"})]
    :entities [{:name "Personal"}]
    :commodities [{:name "US Dollar"
                   :symbol "USD"

                                   :description "Paycheck"}
                  :caption "receipt"}]})

(deftest attachment-list
  (let [context (serialization/realize storage-spec attachments-context)
        [john jane] (find-users context "john@doe.com" "jane@doe.com")
        transaction (find-transaction context (t/local-date 2017 1 1) "Paycheck")]

              (format "A user does not have  %s permission" action)))))
    (testing "A user can be granted permissions on attachment in someone else's entities"
      (grants/create storage-spec {:user-id (:id jane)
                                   :entity-id (:entity-id transaction)
                                   :permissions {:attachment #{:show}}})
      (with-authentication jane
        (doseq [action [:show]]
